F5 Worldwide Field Enablement
Learn More, Sell More, Sell Faster
BIG-IP Local Traffic Manager (LTM)
Fundamentals
Module 1: Initial Installation
Approximate Length: 40 minutes
Based on BIG-IP TMOS version 11.4
For F5 internal and partner use only.
2
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using tmsh
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
3
BIG-IP System Initial Setup
1 Set up the management port
2 Run the Setup Utility
• License the BIG-IP system
• Provision modules
• Configure the platform
• Optionally, setup a failover pair
© F5 Networks, Inc.
4
Management Port Defaults
IP Address 192.168.1.245/24
Username/Password Web: admin/admin
CLI: root/default
© F5 Networks, Inc.
5
Configuring the Management Port Using the LCD
1 On the LCD, press the X button
2 Arrow to System and press the button
3 Arrow to Management and press the button
4 Set the Mgmt IP, Mgmt Mask, and Mgmt Gateway options
5 When finished, arrow to Commit and press the button
© F5 Networks, Inc.
6
Configuring the Management Port Using the CLI Prompt
1 Log into the CLI using root/default
2 Configure using the config utility at the CLI prompt
© F5 Networks, Inc.
7
Accessing the BIG-IP Setup Utility
https://<mgmt
https://<mgmt port IP>
© F5 Networks, Inc.
8
Logging in to the BIG-IP System
3 Log in as admin with a password of admin
© F5 Networks, Inc.
9
•Lesson 1: BIG-IP Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using tmsh
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
10
Setup Utility
Obtain a BIG-IP system license
from F5 Networks
© F5 Networks, Inc.
11
Activating a BIG-IP License
You must activate the BIG-IP system
before moving on
© F5 Networks, Inc.
12
Licensing the BIG-IP System
• You typically license the BIG-IP system through the Setup
Utility wizard
• CLI >> SOL15055: INSTALL /SYS LICENSE REGISTRATION-KEY <LICENSE-KEY>
• Production systems come with the registration key already
installed (but they still require licensing)
• For evaluations, you must obtain a registration key
© F5 Networks, Inc.
13
Licensing Methods
Automatic Manual
© F5 Networks, Inc.
14
Using Automatic Licensing
F5 Licensing Server
18.202.191.1
/config/bigip.license
172.20.10.3 172.20.10.4
© F5 Networks, Inc.
15
Using Manual Licensing
F5 Licensing Server
172.20.20.1
172.20.10.3 172.20.10.4
© F5 Networks, Inc.
16
Entering the Base Registration Key
© F5 Networks, Inc.
17
Two Methods for Manual Licensing
© F5 Networks, Inc.
18
Using the F5 Licensing Server Web Site
© F5 Networks, Inc.
19
Download or Copy the F5 License
© F5 Networks, Inc.
20
Paste the License on the BIG-IP
© F5 Networks, Inc.
21
Resource Provisioning
Provisioning a module
requires a license
© F5 Networks, Inc.
22
Provisioning BIG-IP Resources
Resource provisioning gives control
over CPU, RAM, and disk space
GTM LTM
LTM
© F5 Networks, Inc.
23
Resources Controlled by Provisioning
CPU
• Controls how much CPU the module uses
Memory
• Allocates memory to the TMM and modules
Disk
• Controls mass-storage allocation for modules
• Has no impact on boot locations and the /shared
directory
© F5 Networks, Inc.
24
Provisioning Levels
Level Behavior
None Module is disabled
Dedicated Module gets the whole system; only one
module at a time can be provisioned as
“dedicated”
Nominal Module receives its fair share of the
resources
Minimum Module is enabled, receives only its
minimum resources
© F5 Networks, Inc.
25
Setup Utility – Device Certificates Page
Import a new BIG-IP
management port certificate
© F5 Networks, Inc.
26
Setup Utility – Platform Page
F5 Networks recommends
changing the root and admin
account passwords
© F5 Networks, Inc.
27
Setup Utility – Standard Network Configuration
You must manually configure
network settings
© F5 Networks, Inc.
28
Setup Utility – Redundant Device Wizard Options
You can configure
high availability later
© F5 Networks, Inc.
29
Setup Utility – Internal Network Configuration
© F5 Networks, Inc.
30
Setup Utility – External Network Configuration
© F5 Networks, Inc.
31
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using Traffic Management Shell (tmsh)
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
32
Using the Configuration Utility
© F5 Networks, Inc.
33
Configuration Utility – Functionality
© F5 Networks, Inc.
34
Configuration Utility User Interface
For LTM
nce profiles, and System dashboard, traffic Web applica
tion Manager (AAM) statistics, and graphs BIG-IP Application S
nd templates
Network tunnels and authentication ICSA-certified n
and authorization servers BIG-IP Advanced F
access using
nager (APM)
Enforce RFC compliance using
alancing using BIG-IP Protocol Security Manager (PSM)
Manager (GTM) High a
© F5 Networks, Inc.
35
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using Traffic Management Shell (tmsh)
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
36
What is an Archive File?
• It’s a backup copy of configuration data
• It’s in the form of a user configuration set, or UCS
• You use an archive file to restore the
BIG-IP system to a previous state
• Each UCS file contains:
• System-specific configuration files
• Product licenses
• User accounts and passwords
• DNS zone files
• SSL keys and certificates
© F5 Networks, Inc.
37
Accessing the Archives Page
© F5 Networks, Inc.
38
Creating a New Archive File
© F5 Networks, Inc.
39
Managing Archive Files
© F5 Networks, Inc.
40
Restoring or Exporting an Archive File
© F5 Networks, Inc.
41
Restoring an Archive from Another BIG-IP System
Do NOT use the Configuration Utility to restore
an archive file from another BIG-IP system!
UCS archive file
• Contains BIG-IP system license
© F5 Networks, Inc.
42
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using Traffic Management Shell (tmsh)
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
43
What is tmsh?
• Stands for “traffic management shell”
• Use it to:
• Configure system features
• Set up network elements
• Manage traffic
• View statistics and performance data
• Use either the BIG-IP serial console or an SSH client
• Can be use to create and run scripts
© F5 Networks, Inc.
44
tmsh Structure
tmsh
root
Use tmsh to manage
BIG-IP system objects create /ltm/profile/tcp “NAME”
apm gtm ltm net sys
auth dns monitor persistence profile virtual
application disk software
client-ssl http tcp
create “NAME”
© F5 Networks, Inc.
45
Two Methods for Issuing tmsh Commands
© F5 Networks, Inc.
46
Using Command Completion
Use the Tab key to complete commands
© F5 Networks, Inc.
47
Using the Help Feature
tmsh includes help for all
commands and components
© F5 Networks, Inc.
48
Using Context-Sensitive Help
Use context-sensitive help
as you type commands
create http_pool
create
create http_pool members
© F5 Networks, Inc.
49
Restoring an Archive Using tmsh
Do NOT use the Configuration Utility to restore
an archive file from another BIG-IP system!
load sys ucs bigip_v
bigip_v11.4_ltm_installed.ucs no-license
© F5 Networks, Inc.
50
Exiting from tmsh
Command Context Action
/ Any level of the tmsh hierarchy Returns you to the root module
exit Within object mode Returns you to the component
within which the object resides
exit Within a component Returns you to the module within
which the component resides
exit Within a module Returns you to the parent module
quit Within a module Closes tmsh
© F5 Networks, Inc.
51
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using Traffic Management Shell (tmsh)
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
52
System Preferences
© F5 Networks, Inc.
53
User Account Management
• User accounts ensure:
• User identity (authentication)
• Access to resources (authorization)
• Use user roles for controlling access
F5 Networks to system
recommends user resources
accounts
for all Configuration Utility and tmsh users
• Each role defines:
• The resources a user can manage
• The tasks the user can perform
BIG-IP resources include nodes,
BIG-IP tasks include create, virtual servers, and profiles
• Common user roles are:
delete, and disable
Access
• Resource administrator: has access to all all
to nearly resources
objects on the system except
user account management except for user accounts
Create, modify, and delete
• Manager:can create, modify, and delete virtual servers, pools, pool members, nodes,
multiple BIG-IP resources
profiles, monitors, and iRules
Enable and disable nodes
• Operator: can onlyand pool
enable or members
disable nodes and pool members.
© F5 Networks, Inc.
54
Understanding the Default User Accounts
• admin
• root
• Only used for CLI and tmsh access
• Not available for the Configuration Utility
© F5 Networks, Inc.
55
Creating a New User Account
View the /var/log/secure file
© F5 Networks, Inc.
56
Module Review
•Lesson 1: BIG-IP System Initial Setup
•Lesson 2: Using the Setup Utility
•Lesson 3: Using the Configuration Utility
•Lesson 4: Using Archive Files
•Lesson 5: Using Traffic Management Shell (tmsh)
•Lesson 6: System Preferences and User Access
© F5 Networks, Inc.
57
F5 vLab Overview
All LTM Fundamentals hands-on
exercises use the F5 vLab
SYSTEM COMPONENTS LICENSING
REQUIREMENTS • VMware Workstation • Requires a valid
• Windows system • BIG-IP VE evaluation license
• Memory: 8GB • LAMP
• Disk: 50GB • DoS Tool
© F5 Networks, Inc.
58
Hands-On Exercise 1.1 – 1.3
Access the exercise guide
on the module landing page
on F5 University
• Install and configure the
BIG-IP system in the
virtual environment (vLab)
• Activate the BIG-IP VE
system and complete the
Setup Utility
• Explore tmsh
• Create an admin account
• Update system
preferences
© F5 Networks, Inc.
F5 Worldwide Field Enablement
Learn More, Sell More, Sell Faster
